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2 1. Introduction 



3 This document presents Stage 1 descriptions for CDMA smart card services. The intent 

4 of this document is to provide inputs on user considerations, and possible service 

5 interactions to aid in the development of smart card services and other layer associated 

6 capabilities. 

7 Smart card functionality includes: 

8 • Privacy key management and authentication interface between the subscriber 

9 and the CDMA mobile station 

10 ■ • Personalized feature subscription record 

11 • Transport of non-telephony applications, e.g. credit card, electronic coin purse 

1 2 and loyalty program 

13 • Remote management of data/voice/facsimile applications. 

14 Smart card applications are identified below: 

15 • Pre-paid Services 

16 • Plastic Roaming 

17 • Fraud Prevention 

18 • Future applications: Portable Storage and Non-telephony Services 

19 It is assumed one card per subscription at the initial stage. Ultimately, there can be 

20 multiple cards per subscriber and the smart card can enable the wireless data/voice 

2 1 services as the transport mechanism underlying non-telephony, end-to-end applications. 

22 With the above functions and applications, service providers will be able to realize the 
2 3 following benefits: 

24 1) Service offers with billing and provisioning capabilities through an 

2 5 intelligent/synergistic mechanism. 

26 2) Common/flexible means for billing and provisioning cross wireline, wireless, and 

2 7 cable TV services. 

28 3) Plastic roaming cross different access technology networks. 
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4) pS 0mbi,ity tMm ' SUbSCripU0nS ' netWOrk - ^ce 


3 
4 


5) Markedng differentiation - Brand exposure, expanded distribution channels 
advertising revenues, customer loyalty programs. "nouuon channels, 


5 
6 


6) Billing and customer care alternatives - Fraud protecUon/management ease of 
distribution, remote activation alternative "scwem, ease oi 


7 
8 


7) Cheaper to subsidize if needed- cost ner mm ic m ,„.i. -v. 

station. cheaper than cosl P er mobile 


9 


8) Revenue assurance with pre-paid service. 


10 


The smart card can bring the following benefits to the subscribers: 


11 


1) Convenience for international business travel with rental mobile stations. 


12 


2) Domestic travel to areas with different network technology. 


13 


3) Public mobile stations with individual k;u;«~ 

vviui liiuiviuuaj uinins rcDort 


14 


4) Employees can share mnhilp ct^tinnc t» ^ . 

! "" u,snaremoDl 'e stations with personalized privileges and accounting. 


15 
A6 




17 


o) It is easier to can-v q rtioeti/% ^o*-^ * ■« 

/ no www iu tarry a plastic card than a mobile station. 


18 
19 


7) Theft-proof : a smart card can not be used without a CHV verification and other 
security mechanism built in the network, e.g. IS-41 CAVE, etc 0ther 


20 


8) Effective fraud control and prevention. 


21 





4 
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2 2, References 

3 2.1. References for Smart Card Services __ 

4 

5 International Standards Organization (ISO) 7816-1,2,3-6 Information 

6 technology - Identification cards - Integrated drcuitfsj cards with contaefrarts 

7 1 through 6 

8 T1P1 .3/ V. 5. x PCS User Identity Module (VIM) Specification, 1996 

9 CCITT 1988 (Blue Book),Volume III - Fascicle III.7, Integrated Services Digital 

10 Network (ISDN) General Structure and Service Capabilities; Recommendations 

11 I. HO- 1,257. 

12 Technical Specification GSM 02.17: Subscriber Identity Module, Functional 

13 Characteristics; August 31, 1993. 

14 Technical Specification GSM 11.11: Specification of the Subscriber Identity 

15 Module - Mobile Equipment (SIM - ME) interface; October 1993. 

16 J-STD-007, PCS 1900 Smartcard - ANSI Standard 

17 J-STD-008-1995, Personal Station-Base Station Compatibility 

18 ANSI Requirements for 1.8 to 2.0 GHz Code Division Multiple Access (CDMA) 

19 Personal Communications Systems , Telecommunications Industry Association, 

20 1995m 

21 TIA/EIA/IS-41-C, Cellular Radio-Telecommunications Intersystem Operations, 

22 Telecommunications Industry Association, December 1995. 

23 TIA/EIA/ IS-95-A, Mobile Station-Base Station Compatibility Standard for Dual- 

24 Mode Wideband Spread Spectrum Cellular System, Telecommunications Industry 

25 Association, May 1995. 

26 TIA/EIA/IS-95-A, Appendix A, Message Encryption and Voice Privacy. An ITAR 

27 controlled document subject to restricted distribution. Contact the 

28 Telecommunications Industry Association, Washington, D.C., November 16, 1994. 

29 TSB50 , User Interface for Authentication Key Entry, Telecommunications 

30 Industry Association, March 1993. 

3 1 TSB7 4 , Support for 14.4 kbps Data Rates and PCS Interaction for Wideband 

32 Spread Spectrum Cellular Systems, Telecommunications Industry Association, 

33 December 1995. 
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7 
8 
9 
10 



27 
28 
29 



32 
33 
34 



3 Authentication 
4 

5 



Authentication - A secure procedure used to validate a mobile station's identity 
involving the A-key and the CAVE Algorithm. * 

4 Au 4 t 1 he,,t ^ a 1 ti0I, Center - ^ enti *y that manages the authentication information related 
» to the mobile station. 

Authentication Key (A-key) - A secret 64-bit pattern stored in the subscriber unit It is 
used to generate and update the subscriber unit's Shared Secret Data The A-kev is used 
in the authentication process. 



Authenticating Network - Networks that validate a subscriber through authentication 
" Authomed Dealer " A* a g e * that is authorized by a service provider to sell that 

" se ™ce provider's product or service to a customer. 

13 Automatic Teller Machine (ATM) 

" Ca " ' A tem P° r aiy communication between telecommunications users for the purpose of 

J! exchanging information. A call includes the sequence of events that allocates and 

" SSLn 5011 ^ 8 ™ d ChanndS reqUirCd t0 CStablish a comm ^ications 

Jf Ca !? Ho,de r Verifica «on (CHV) - Access condition used by the SIM for the 

19 verification of the identity of the user. 

\l Cellular Service Provider -A licensee of the responsible government agency (in the 

t\ J*? 8 ** Federal Communications Commission) authorized to provide 

Cellular Radiotelephone Service. 

24 C ° de D ! visi( i n Multi P ,e Access (CDMA) - A technique for spread-spectrum multiple- 

„ aCCesS communications that creates channels through the use of unique code 

« 5 sequences. H 

26 S 0 "?^ Co ** - A uni( i ue 1 -> 2 - or 3-digit code assigned to countries in the World 

Numbering Plan. For international dialing purposes, the world is divided into nine 
zones. The first digit of a countiy code is the world number. 
, n Customer - A person who purchases a mobile station and is a prospective subscriber to 

30 a cellular semce provider. 

31 Customer Service Center- An entity of a service provider that provides user support 
and assistance to subscribers. 



Customer Service Representative - A person that operates from a customer service 
center and provides user support and assistance to subscribers 
3 5 DMH - Data Message Handler 

I* Digits -Digits consist of decimal integers 0, 1,2, 3, 4, 5, 6, 7, 8 and 9 

11 Dktribution. Channel - A method for providing a product or service to a specific 

Directory Number - The phone number used to dial a subscriber 

i? Dual-mode Mobile Station - A mobile station capable of analog or digital operation 

It Electronic Serial Number (ESN) - A 32-bit number assigned by the mobile station 

11 manufacturer used to identify a mobile station. The ESN is unique for each legitimate 

* J mobile station. 

ii Home ^. cation Re 8 ister (HLR) -The location register or database to which a MIN is 

* assigned for record purposes such as subscriber information 

I! International Mobile System Identification QMSI) - The information which uniquely 

47 identifies a subscriber to the PSTN or PLMN. 

if Mob " e Wenlification Number (MIN) - The 10-digit number that represents the phone 

49 number of the subscriber unit. 
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MODiie Mat ion (Moj - ine mouiie or ponauie suoscnuer raaio leiepnone equipment 


2 


(same as Cellular Subscriber Station). 


3 


Mobile Switching Center (MbC) • A configuration of equipment that provides cellular 


4 


radiotelephone service. 


5 


National Number - The number identifying a subscriber line or terminal within an area 


6 


designated by a country code. 


7 


Network - The telecommunications equipment that has any part in processing a call or 


8 


a supplementaiy service for the subscriber referred to. It may include local exchangers 


9 


and transit exchanges, but does not include the mobile station and is not limited to the 


10 


"public network" or any other particular set of equipment. 


11 


NDSS - Network Directed Systems SelecUon 


12 


Numeric Assignment Module (NAM) - The electronic memory module of the 


13 


subscriber unit where the NUN and other subscriber specific parameters are stored. 


14 


Subscriber units that have multi-NAM features offer users the option of using their units 


15 


in several different markets by registering with a local number in each location. 


16 


OTASP - Over-the-Air Sevice Provisioning 


17 


PCS - Personal Communication Services 


18 


Personal Identification Number (PEN) - A string of digits used to validate a 


19 


subscriber s identity. In order to distinguish the PIN from the de-registration or de- 


20 


activation feature codes using a Modifier Digit 0, the PIN shall not start with the 


21 


digit 0. The PIN shall be at least 4 digits and shall not have too many repeated digits. 


22 


(e.g., no more than 2). 


23 


Portability • The ability for a smart card to operate in a variety of smart card compatible 


24 


terminals. 


25 


PLMN - Public Land Mobile Network 


26 


PSTN - Public Switch Telephone Network 


27 


Registration - Method by which a mobile station notifies the network of its location and 


28 


parameters. 


29 


Roamer - . A mobile station operating in a cellular system or network other than the 


30 


one from which service is subscribed. 


31 


Roamer Service Profile - • The specific set of features, capabilities and/or operating 


32 


restrictions, other than financial accountability, associated with the subscriber. 


33 


Service Provider - A company, organization, business, etc. which sells, administers, 


34 


maintains, and charges for the service. The service provider may or may not be the 


35 


provider of the network. 


36 


Shared Secret Data(SSD) - A 128-bit pattern stored in the mobile station (in semi- 


37 


permanent memory) and known by the network. The SSD is a concatenation of two 64- 


38 


bit subsets: SSD_A which is used to support the authentication procedures and SSD_B 


39 


which serves as one of the inputs to the process generating the encryption mask. 


40 


Subscriber Identification Module (SIM) - The SIM card is the Subscriber Identity 


41 


Module. It contains necessary information to verify and authenticate the subscriber. 


42 


There are two sizes, full size and plug-in. 


43 


Smart Card Serial Number - In order for the service providers to identify the smart 


44 


card, there needs to be a smart card serial number. This is a unique number that 


45 


identifies the smart card. It can be printed on the card. It is not secret data, it is not sent 


46 


over the air. 


47 


Stage 1 - This stage is part of the overall method used to characterize 


48 


telecommunication services. Stage 1 defines the service aspects of a capability. 


49 


Specifically, Stage 1 provides a service description of a telecommunication service from 


50 


the user point of view (refer to CC1TT Recommendation 1.130). 


51 


Stage 2 - This stage is part of the overall method used to characterize 


52 


telecommunication services. Stage 2 defines the functional aspects of a capability. 


53 


Specifically, Stage 2 provides a description of the functions at the user-network interface 
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1 TfiJr** nCtWOrk b£tWeen network elem ents (refer to CCITT Recommendation 



2 7.750; 
3 



30 
31 
32 



SSL! "• ^ gC IS o Part ° f 016 overan method ^ to characterize 
telecommunication services. Stage 3 defines the network implementation aspects of a 
capability. Specifically, Stage 3 provides a description of the actual prS an2 
formats used to develop the telecommunication service (refer t COTT 
Recommendation 1.130). ■ 1 

Subscriber - A person authorized for a feature or service 

Subscriber unit (SU) - The portion of the mobile or portable subscriber radiotelephone 
equipment that contains the unique information to identify a subscriber. The SU can be 

u^ontuon ^ ° r ' Smart 01 0Uler dCVice "ntains^uch 

Universal I Identification Module (UIM) - This term is used in T1P1.3 to refer to the 
logic function or the SIM card in the mobile station 

World Numbering Plan - A plan created by the CCITT that provides each telephone 

code followed by the national number as defined in CCITT Recommendations E 7o7bv 
international agreement, the number of digits in the country code plus national' number 
is limited to a tOTASPl of 12 digits currently, with a recommendation to incre^ T*e 
maximum leneth to 1 <5 Hiahc th» ™a ^ i on* u " ltrease me 



4 

5 

6 

7 

8 

9 
10 
11 

12 information 
13 
14 
15 
16 
17 
18 
19 

^° maximum length to 15 digits by the end of 1996 

22 l^° U ' 7116 Pr0CeSS ^ WbJCh 3 "* BCriber " aUth0rized 10 access ™ d « a cellular 

24 ™^ 
25 



26 4. Global Feature Descrip tion 

2« UP ° n *u, T dpt ° f 3 Smart card frora a service P rovi <ter, the subscriber shall be 

2 9 SSr 11516 f ° r mSerting ^ Smart Card int0 a mobi,e **» or a smart card compatibk 



33 implementation specific. 



The subscriber with a smart card may have to subject to Card Holder Verification (CHV) 

I r° nal Ide " tif [ cation Number - ™) ^ order to access voice/data 
applications. Each smart card shall have a CHV to secure card access. Use of CHV is 



34 
35 
36 
37 

38 
39 
40 
41 



43 
44 



InL irT? ?,T, 3 Smgle Smart C3rd COntaining mu,li P ,e ^Plications in multiple 
smart card compatible devices, provided the device supports the particular application 

Z, e w P ' a mulu - a PP| ication card supporting a telephony and a banking application 
may be successfully used in both a mobile station and an ATM-type machine. 

The smart card can be removed from the mobile station when not in use. The size of a 
smart card does not have to be smaller than the mobile station as long as a compatible 
interface is provided. Full size smart cards are preferred because mey b^emoved 
from the mobile station and stored elsewhere with other payment type cards and used for 



42 other horizontal applications 



$^™ h ° ne Ca " Sh ° Uld n0t be a " 0wed without the smart card P rese "t in the mobile 
station. There are exceptions to this case which will be determined and authorized by the 
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service provider. Examples are emergency 911 calls, calls to update the value of the 
individual account, 800 calls, service order calls, etc. When the smart card is inserted, 
the mobile station can be powered up manually or automatically. 



4 It is assumed one card per subscription in this document. 
5 

6 5. Smart Card Feature Descriptions 

7 The following sections describe individual smart card features and services. 

8 5.1. Pre-paid Service 



9 Pre-paid subscription will provide an attractive payment option to service providers as 

10 well as to a large segment of the customers because it can provide a means for "cash 

11 economy" and for poor credit, high risk customers to obtain wireless service. 

12 A smart card can be used to support pre-paid subscription similar to a debit card. The 

13 subscriber can pay cash or link the smart card to an authorized credit card institute. The 

14 activation of smart card can be done at home through phone via OTA, at an ATM 

15 machine, at a service center or other convenient stores equipped with the appropriate, 

16 secured terminal. The distribution of the smart card can be handled through regular 

17 mail, so can the "refill" mechanism. 

18 A unit amount, in dollars or minutes, representing purchased air time may be stored on 

19 a smart card. The user may make and receive phone calls, and use network services. The 

20 value on the smart card will be decremented as the authorized subscriber makes phone 

21 calls until the value of the card is exhausted. The subscriber may replenish the card by 

22 purchasing additional units. The service provider may offer a variety of rate plans and 

23 provision the smart card according to the subscriber's choice. After provisioning, the 
2 4 card value can only be decremented as phone calls are made. 

2 5 The value of the card can only be incremented through an authorized party or process to 

26 avoid illegal tempering. The value filled in the smart card can be re-adjusted per 

27 subscriber's request through the pre-arranged authorization process supported by the 

28 service provider. 

29 The smart card may be used to track value off-line, i.e. without network involvement. 

30 The subscriber may request to have balance and other relevant call detailed records 

31 displayed in the window provided on a mobile station. 

32 Once the value on the smart card is depleted, the customer can not make normal phone 

33 calls except specified by the service provider. These allowable free calls can include 911 

34 emergency calls, 800 calls, or subscription related calls such as 411, 611, etc. to update 

35 the value and privileges carried by the card subscriber. 
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The smart card provisioning process, i.e., subscriber provisioning has to be automated 

with sufficient tools (OTASP and/or SIM application toolkit) to warrant^ 

above and beyond the conventional existing plastic calling cards with orZZTZ 

swsTpsar to update wm ~ — ~ 2 5 

A subscriber scenario is described as follows: An automated kiosk at a neighborhood 
convenience store may accept cash, debit or credit cards in payment fo added telec^ 
units. The subscriber inserts cash or swipes a debit or credit^ tadEtes to S 
to purchase, then receives a smart card for equal replenishment. AtaSS t£ 
subscriber's , service may be call-diverted to a customer service represent for to 
purchase of additional units. The customer service representative luTrXish to 

ZLff **** ™ Sr 6 '-^ Se ™« ^visioning adminiSon! oTotle 
automated procedures. The service provider can also mail the smart cU to to 
subscriber for a newly established amount and a feature set. 

The Pre-Paid Service should allow the service provider to better administer customer 
credit control, mass market penetration and acceptance of temporary or sh^rt 
subscribers This capability should make it possiblefor servic pS to mpfcmem 
vanous billing strategies such as mobile originated or mobile teL 

^iTS"*" With0nt making ma J' or ^cations to their neZrfc 

Equally to smart card should carry individual billing information such as ad^ of 

mof l^e^l K ' PM SCrViCe r * minimUm impact 0n netwo * ^ould be 
made available for to service provider to offer this service quickly Later a full 

zs^isr shouw * — ■ ™* - «s 

SUSf^'T" i ^ Sl """ d * dea " ">* A °«»Se should be 

ssht" i ° suffideni va,ue 10 *» — * <*•- 

Examples of optional steps can be: 

L Call the service center to receive changes; 

1 Call the service center to grant more value; 

1 Enter a card terminal to receive value equivalent to additional cash payment; 
4, Authorize usage of credit account to extend usage; 
L Receive a new card from a service center or in mail. 

These options will be adopted according to the type of smart card as explained below: 

1. Throwaway smart card. After credit amount and/or time expires, the smart card is 
permanently disposed of for making phone calls. S 
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1 2. Rechargeable smart card. The service provider can define circumstances by which 

2 customers are able to recharge their smart cards with additional payments. 

3 3. Upgrade from prepaid to credit card. This will allow the subscriber to use post 

4 payment service as it is typically the case after completing a successful credit check. 

5 

6 Some tentative attributes and anticipated values are provided below: 



Attribute 


Value 


Account balance 


Assume SO - $10,000 9 allowable 
per Service Provider 


Rate set preferences 


Assume maximum 100 rate plans 


Accumulative call meter 




Advice of charge 




Currency exchange rate 


Exchange rate of major currencies 


OTASP 


Over the Air Service Provisioning 


DMHIink 


Tie to the near real time billing 
data 


CHV Authorization 


CHV, ESN and MIN combination 
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8 - 5.1.1. Normal Procedures With Successful! Outcome 

9 5.1.1.1. Authorization 

10 Pre-paid Service may be provided after pre-arrangement with the service provider, or 

1 1 may be made generally available by the service provider. 

12 5.1.1.2. De-Authorization 

13 If Pre-paid Service is provided after pre-arrangement with the service provider, the 

14 service shall be de-authorized at the subscriber's request or for administrative reasons. 

15 5.1.1.3. Registration 

16 Pre-paid Service should allow registration of the smart card either through the 

1 7 terminal/mobile station or through the network. 
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5-1.1.4. De-Registration 



Pre-paid Service does not have to have De-Registration. 
5.1.1.5. Activation 



Pre-paid Service shall be activated upon authorization. 
5.1.1.6. Deactivation 



Pre-paid Service shall be de-activated upon De-Authorization. 
5.1.1.7. Invocation 



Pre-paid Service is invoked by issuing of the appropriate application level commands. 

5.1.2. Exception Procedures or Unsuccessful Outcome 



If the card is ; warped or damaged, the card can not trigger any service, replacement will 
be sought. If card access by an unauthorized user is detected through CHV or other 
security verification, the call will be denied 



5.1.2.1. Registration 

None identified. 

5.1.2.2. De-Registration 

None identified. 

5.1.2.3. Activation 

None Identified. 

5.1.2.4. Deactivatio n 

None Identified. 

5.1.2.5. Invocation 

If Pre-paid Service cannot be established for the service session or if the service sessions 
are interrupted in progress, the network may clear the service session. The originator of 
the^ervice sess,on should be provided with an indication that the service session has 
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1 5.1.2.6, Exceptions While Roaming 

2 None identified. 

3 5.1 .2.7. Exceptions During Intersystem Hand-off 

4 Intersystem hand-off should not affect Pre-paid Service integrity. 

s 5.1.3, Alternate Procedures 

6 None identified. 

7 . 5,1.4, Interactions With Other Wireless Services 

8 5.1.4.1. 

9 For Further Study 
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5.2. Plastic Roaming Service 



3 
4 
5 
6 



Plastic Roaming Service will allow a user to roam outside of his/her home system 
through the use of a smart card. This service will provide the capability ofTowiS 

With 3 preferTed roaming *— which ^ Ln p-^.~ 



7 

8 
9 
10 
11 



12 
13 
14 
15 
16 
17 



24 
25 
26 



The smart card will contain a list of preferred seiving systems that would associate the 

selects a preferred serving system, the name and greeting of the local service orovider 
may be dehvered to the subscriber. This list "will pLide the^s^Se 
flexibility of maintaining his/her most frequently visited location. 

L^J™^™? £ 0Vider may i5SUe provided WW of muUlple technology 
mpnnted on the card. The service provider that has more than one type of techno Z 
to offer to its cellular or PCS subscribers will have the capability of p^dynfeSS 
roaming access on the same smart card. If a smart card subscriber is umS^l t^ 
particular network technology, he/she may chose to disconnect from the ISJSZi 
reconnect with another network technology. 



^T^Z - ~ h int ° I ^ Card teminal unit at a11 ^le plastic 
roaming. The smart card prepersonalization data must be verified and validated before 
plastic roammg can occur. After registeration the service provider Z 
roamer service profile. The roamer service profile may store Ld mlnS S 
feature information f e <* antnmotiV xm PP . « "wmuun me specuic 



18 
19 
20 
21 

5 0 . . ^ — -wiTiw pjumc may siore ana maintain the snecifir 

«f ,rmauon (e * au,omatic roaming ' NDSS > etc > for SSITS 



23 termination 



27 
28 

29 etc.) 
30 



Smart card location information and time of call would provide geographical roaming 

SSSS3£S T ginati0 i *? ,erminaU ° n - 71,686 *ouW £2 to 

racilitate billing functions via the home service provider. 

UMMfr S Car , < ;. S ? 0Uld a "° W roamin S across multi P«e bands (800, 900, 1800, 
1900 MHz, etc.) and multiple access technologies (PCS, CDMA, GSM, AMPS, TDMA 
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Attribute 


Value 


Prepersonalization data 


Authentication key, IMSI, status 
of card(block, unblock), CHV 


TivyiCT 
UVIM 


international MODiie station 
Identification 


1Mb! 


Temporary Mobile Station 
Identification 


LAI 


Location Area Information 
(SID/NID) 


Time 


Time related to periodic location 
updating 


Roamer Service Profile 


Automatic roaming, SSPR, NDSS, 
CW, CFB, 3WC, etc. 


Extended Network Technology 
Access 


Provide interoperability with 
other networks (GSM, CDMA, 
PCS, AMPS, TDMA) 


OTASP 


Over the Air Service Provisioning 


SED/NID 


List of preferred 
Systems/Network ID provided by 
the home system 


Feature Codes 


Automatic roaming, SSPR, NDSS 
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2 5.2.1. Normal Procedures With Successful Outcome 

3 5.2.1.1. Authorization 

4 Plastic Roaming Service may be provided after pre-arrangement with the service 

5 provider, or may be made generally available by the service provider. The smart card 

6 subscriber prepersonalization data would be imprinted on the card at authorization. 

7 5.2.1.2. De-Authorization 

8 If Plastic Roaming Service is provided after pre-arrangement with the service provider, 

9 the service shall be de-authorized at the subscriber's request or for administrative 

10 reasons. 

11 5.2.1.3. Registration 

12 Plastic Roaming Service has no registration. The mobile station handles registration. 
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5.2.1.4. De-Registrati n 



Plastic Roaming Service has no De-Registration. 
5.2.1.5. Activation 



Plastic Roaming Service shall be activated upon authorization. 
5.2.1.6. Deactivation 



Plastic Roaming Service shall be de-activated upon De-Authorization. 
5.2.1.7. Invocation 



Plastic Roaming Service is invoked by the smart card user inserting the smart card into 
the mobile station or smart card compatible device. The user may enter a CHV for 
verification to access the smart card roamer service profile and other applications. 

5.2.2. Exception Procedures or Unsuccessful Outcome 

5.2.2.1. Registration 

None identified. 

5.2.2.2. De-Registration 

None identified. 

5.2.2.3. Activation 

None Identified. 

5.2.2.4. Deactivation 

None Identified. 

5.2.2.5. Invocation 



If Plastic Roaming Service cannot be established for the service session or if the service 
sessions are interrupted in progress, the network may clear the service session The 
ongmator of the service session should be provided an indication that the service session 
has failed. 



Smart Card 



1 5.2.2.6. Exceptions While Roaming 

2 If plastic roaming service cannot be established or a service session fails while roaming, 

3 the originator has the option of reconnecting to another extended network technology. 

4 Reconnection would occur after the originator has disconnected from the current 

5 extended network technology he/she is on and re-register with another extended 

6 network. 

7 5.2.2.7. Exceptions During Intersystem Hand-off 

8 Intersystem hand-off should not affect Plastic Roaming Service integrity. 

9 5.2.3. Alternate Procedures 

10 None identified. 

11 5.2.4. Interactions With Other Wireless Services 

if 

12 5.2.4.1. 

13 For Further Study 

14 
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5-3, Fraud Prevention Service 



The smart card provides mechanisms that assure a high degree of privacy and 
authentication This ; privacy and a uthenti c ation fim ction is the h»™ f or an othgrjmart 
card services. This function sho uld be compliant with the existing ttim authentic 
and pnvacy specification for thp PCS ap plication s (ref T1P1 3 

7 The Fraud Prevention Service provides the following measures: 

8 1 • Preventing cloning of subscriptions by: 

9 -Securing the distribution of subscriber data 

1 0 - Secure storage on the smart card 

11 - No programming of phone (at distribution^ with sensitive data 



12 2. Authentication: 

" " User to SIM (subscription) with GHV/PIN 

- SIM (subscription) to network with secret keys and algorithms 



3. Safeguarding subscriber anonymity because: 



15 

" : ™ e a y era * e ; nt f ceptor cannot tell who is using the phone (TIMSI), nor can the 

- 1 ' interceptor track the user. 
18 

19 4. Encryption of: 

20 - all signaling data and 

21 - all communications content (voice, data, etc.) 

" aJgoriS Card han<!le mUUiP,e SeCUrity algorithms includin g K- 41 and GSM based 



29 environment. 



V T bC USCd in con J' unction conventional CHV code. Subscriber 

fraud should be drastically reduced with the smart card due to the fact that the keys and 
the algorithm execution is performed within a secure environment of a single chin At 
no time does secret data or intermediate algorithmic results leave this secure 



The smart card anthent.cat.on will be handled either b y the network nr «h. m 
term nal/mob.le station . The smart card needs to operate with networks that can/will 
handle authentication as well as those that can/wiH not. Depending on the network 
authenuration capability, the proper combination of the CHV, A-key, MTN (or IMSD 
and the ESN of the mobile station will be validated for a particular subscriber to assure 
3 , maximum authentication. The subscriber security identity is portable with the card and 

J b me subscriber across all smart card capable mobile stations 



38 11,6 c f d . wi11 enable ^ service provider to process authentication key with 

39 by C SfoT , A?p Utl0n ^ management - 11 Sh0uld dement security functions supplied 
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Attribute 


Value 


Authentication key 
Authentication algorithm 
OTASP authentication responses 





1 

2 



3 5.3.1. Normal Procedures With Successful Outcome 



4 5.3.1.1. Authorization 



5 Fraud Prevention Service may be provided after pre-arrangement with the service 

6 provider, or may be made generally available by the service provider. 

7 The three categories of Fraud Prevention may be authorized as follows: 

8 1. CHV code, is initially always enabled. The user can disable and enable this service at 

9 will. However pre-paid cards will always need a CHV code before attempting a call 

10 setup. The CHV will be administrated bv the service provider in conjunction with 

11 different levels of security. The subscriber can access and change only the CHV, not 

12 other security algorithms involving A-kev. etc. 

13 2. Authentication is mandatory. The A-key or similar parameters may be stored on a 

14 UIM together with an authentication algorithm. 

15 3. Encryption prevents subscription data from being illegally captured and used. 

1 6 Encryption shall always be used whenever available. 

17 5.3.1.2. De-Authorization 



18 If Fraud Prevention Service is provided after pre-arrangement with the service provider, 

19 the service shall be de-authorized at the subscriber's request or for administrative 

20 reasons. The Fraud Prevention Service is provided until termination of entire telephone 

2 1 service at the subscriber's request or for administrative reasons. 
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5.3.1.3. Registration 



Fraud Prevention Service has no registration. 
5.3.1.4. De-Registration 



Fraud Prevention Service has no De-Registration 
5.3.1.5. Activation 



Fraud Prevention Service shall be activated upon authorization. 
5.3.1.6. Deactivation 



Fraud Prevention Service shall be de-activated upon De-Authorization. 
5.3.1.7. Invocation 



Fraud Prevention Service is invoked by issuing of the appropriate application level 
commands. 

The three categories Fraud Prevention will be invoked: 

1. CHV code is invoked by issuing of the appropriate application level commands. 

2. Authentication is invoked by the MS or by the network. 

3. Encryption is invoked by issuing of the appropriate application level commands. 

5.3.2. Exception Procedures or Unsuccessful O utcome 

5.3.2.1. Registration 

None identified. 

5.3.2.2. De-Registration 



None identified. 

5.3.2.3. Activation 



None Identified. 
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1 5.3.2.4. Deactivation 

2 None Identified. 

3 5.3.2.5. Invocation 

4 If Fraud Prevention Service cannot be established for the service session or if the service 

5 sessions are interrupted in progress, the network may clear the service session, The 

6 originator of the service session should be provided an indication that the service session 

7 has failed. 

8 5.3.2.5. Exceptions While Roaming 

9 None identified. 

10 5.3.2.7. Exceptions During Intersystem Hand-off 

1 1 Intersystem hand-off should not affect the Fraud Prevention Service integrity. 

12 5.3.3. Alternate Procedures 

13 None identified. 

14 5.3.4. Interactions With Other Wireless Services 

15 5.3.4.1. 

16 Fraud Prevention Service is the foundation block to all the other services. This service 

17 will interact with other services at the beginning of the call set-up. More study is 

18 necessary. 
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2 
3 



5.4. Future Services 



5.4.1, Portable Storage Service 



5 
6 
7 
8 



10 
11 
12 

13 

14 

15 

16 

17 
18 



Mapping of feature codes and other subscriber specific data to more user-friendly 
interface can be done in the smart card. Data stored in the smart card can be carried 
with die subscriber for activation in other location, device, or network. Examples of 
these data are listed below: y 

1) Translation of 91 1 to the number appropriate for a specific geographic location. 

2) Service provider's name/greeting associated with certain SID/NID. When subscriber 
places a call in a new SID/NID, name and greeting of the local service provider can be 
delivered to the subscriber. 

3) Voice print of the subscriber. 

4) Audio characteristics. 

5) Short messages, voice and facsimile messages delivered to the subscriber. 

6) Personal health data, education and entertainment preferences. 

for dri^Ter 0 " 50 aPPliCali ° n ° f data per em P l0 ^ e -g- d^tch route assignments 
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Attribute 


Value 


Feature codes 




SID/NID list 




Voice print 




Audio signature 




Short messages 




Voice messages 




Facsimile messages 




Route information 




Personal health record 




Entertainment data 




OTASP 




CHV 
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2 5.4.2. Non-telephony Services 



3 Many current and proposed smart card applications address industries and consumer 

4 needs outside of telephony. A link to these services can be provided by the smart card 

5 which will allow telephony and non-telephony applications to co-exist on the same card. 

6 For example: 

7 1) Transparent wireless transport for "end-to-end" applications facilitating interaction 

8 between the smart card and another entity, e.g. a host machine. 

9 2) Business alliance between financial institution and the wireless service provide can 

10 link telephony and credit services via the smart card. 

11 A telephony application on the smart card may provide wireless access to supply 

12 communication needs of another application also on that smart card. However, a number 

13 of these applications rely upon some form of transport to enable communications with a 

14 host application or database. For example, a financial services smart card enabling 

15 banking transactions might require access to host applications for funds transfer, 

16 payment and account updates. A multi -application smart card containing both a 

17 financial services and wireless services application could provide the required 

18 communications transport services. The user inserts the smart card into the mobile 

19 station, enters the appropriate CHV, then selects the desired financial services 

20 application from an application menu. User information and transaction data could be 

21 transmitted via SMS , voice or data channel from the smart card to the recipient 

22 application and vice versa. The user physically interacts only with the mobile station. « 



Attribute 


Value 


Application name 




Transport protocol 




CHV 




Application detailed billing 




SMS 
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